Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
File:                     Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json)
Hash identifier:          lp90igpDdFG+3+i41FKGzATn1cYyou8jCBedFt2aTDg=
Subject key identifier:   5A:C0:E8:3E:A9:85:85:B2:A7:98:4D:95:F0:CA:D8:05:BA:B2:6D:45
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Certificate issuer:       /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial:       018F3A0CC395996BC8A750A0D52CCF8F2A8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
Manifest number:          078C
Signing time:             Thu 02 May 2024 16:04:25 +0000
Manifest this update:     Thu 02 May 2024 16:04:25 +0000
Manifest next update:     Fri 03 May 2024 16:04:25 +0000
Files and hashes:         1: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: b6tUoWZT1EEYtI5QFeWN662yp9MKm402RZSKGAnbFLY=)
                          2: aNXqmCzLbQnouT_jT1G1K7EstME.roa (hash: 8EnLT68MmT6qhkBXpPOlCTp8EieWlpovGv0PlCXvaIw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0c:c3:95:99:6b:c8:a7:50:a0:d5:2c:cf:8f:2a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
        Validity
            Not Before: May  2 16:04:25 2024 GMT
            Not After : May  3 16:04:25 2024 GMT
        Subject: CN=5ac0e83ea98585b2a7984d95f0cad805bab26d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:ce:ca:63:7e:0f:78:57:a2:90:70:b5:79:
                    3c:c7:82:44:a0:08:55:d1:08:48:d1:48:65:62:35:
                    74:c2:6c:46:d8:d5:c1:e2:ba:02:00:f7:6f:68:59:
                    07:fb:42:53:8f:2f:62:f1:90:1c:8d:bc:1b:ad:29:
                    47:f2:e7:84:bd:ce:f9:3e:82:91:1f:65:e3:83:a7:
                    0f:9a:0d:6d:a9:46:87:4f:0f:8a:00:1d:71:43:fe:
                    fa:34:2c:e9:50:70:34:30:3a:f7:5e:48:c4:23:34:
                    92:8d:aa:68:73:5e:a3:1e:0d:90:22:41:21:49:b0:
                    f6:d9:26:b5:65:72:ea:17:ef:0e:01:38:e5:1f:60:
                    f6:4d:af:8e:fd:34:1b:4f:8b:5d:34:a2:3d:25:71:
                    39:12:89:54:f2:53:8d:b0:a9:5d:7e:7c:01:ae:a2:
                    e7:2b:6c:66:08:39:0f:af:b5:87:d3:82:e6:6c:ae:
                    b7:83:0e:94:f9:9e:40:e5:30:e7:0f:11:8d:01:97:
                    ef:f2:43:e1:18:97:54:57:e1:25:03:ff:53:ca:d1:
                    94:6f:c8:7b:12:df:bd:fd:7f:10:4c:ff:c3:0f:aa:
                    3c:1b:0f:9f:ef:60:f2:7d:5e:68:2b:34:4b:d1:3a:
                    0e:2f:cd:0d:a4:7a:75:1c:87:c0:3f:3b:33:96:de:
                    8a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C0:E8:3E:A9:85:85:B2:A7:98:4D:95:F0:CA:D8:05:BA:B2:6D:45
            X509v3 Authority Key Identifier:
                keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:55:70:77:9a:34:ca:74:ec:5c:ed:c9:8e:94:30:3a:49:b9:
         40:f5:39:9a:93:66:ed:dc:32:c0:37:ed:d0:1c:b4:e1:83:16:
         40:df:a7:56:c8:e8:b1:b5:22:cc:72:35:2c:f9:f4:9b:d9:de:
         15:62:90:42:a5:69:88:86:a4:33:21:b4:1e:ed:4f:e5:75:6e:
         e0:b6:ce:f3:cd:63:ce:2e:ba:f4:ab:ac:62:cc:b1:b6:d6:d7:
         34:0f:60:19:67:4f:b0:0f:1b:fa:3a:36:cc:e8:61:ad:b3:9c:
         9a:8e:48:72:51:34:a5:1f:b6:ab:1e:05:92:68:72:44:f3:fa:
         d9:3e:36:66:65:3e:64:af:04:c2:4b:dd:93:28:17:4c:4c:17:
         fc:b8:46:b4:7d:d7:f1:b4:2a:38:a2:0a:fe:11:61:46:37:2c:
         92:fe:e9:13:21:a5:7a:55:f9:88:4c:ae:e9:77:0a:49:5f:79:
         2f:3c:08:54:35:0a:6e:63:ba:71:7c:7f:7f:5b:f9:ef:13:20:
         1d:6c:a9:db:f7:7c:dd:1b:75:0f:f7:8b:f7:ca:3e:d7:4a:be:
         0e:67:94:9a:0a:b3:61:6b:c9:09:12:9d:75:07:90:4d:17:64:
         b2:cd:e7:35:67:e6:15:92:e1:58:f4:9f:9b:90:0b:27:03:71:
         5a:73:0d:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86DMOVmWvIp1Cg1SzPjyqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmZlZDhiYjY0NDliMWNlYzZiNjY1ZTkzMDcxOGI4NThh
MmI2OTQwHhcNMjQwNTAyMTYwNDI1WhcNMjQwNTAzMTYwNDI1WjAzMTEwLwYDVQQD
Eyg1YWMwZTgzZWE5ODU4NWIyYTc5ODRkOTVmMGNhZDgwNWJhYjI2ZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+XOymN+D3hXopBwtXk8x4JEoAhV
0QhI0UhlYjV0wmxG2NXB4roCAPdvaFkH+0JTjy9i8ZAcjbwbrSlH8ueEvc75PoKR
H2Xjg6cPmg1tqUaHTw+KAB1xQ/76NCzpUHA0MDr3XkjEIzSSjapoc16jHg2QIkEh
SbD22Sa1ZXLqF+8OATjlH2D2Ta+O/TQbT4tdNKI9JXE5EolU8lONsKldfnwBrqLn
K2xmCDkPr7WH04LmbK63gw6U+Z5A5TDnDxGNAZfv8kPhGJdUV+ElA/9TytGUb8h7
Et+9/X8QTP/DD6o8Gw+f72DyfV5oKzRL0ToOL80NpHp1HIfAPzszlt6KrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrA6D6phYWyp5hNlfDK2AW6sm1FMB8GA1UdIwQY
MBaAFBZv7Yu2RJsc7GtmXpMHGLhYoraUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1fdGk3WkVteHpzYTJaZWt3Y1l1RmlpdHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82NTgxZjQtMTQ4My00NTcxLWI3ZDEt
NmRlYTYwM2NjYzdiLzEvRm1fdGk3WkVteHpzYTJaZWt3Y1l1RmlpdHBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi82NTgxZjQtMTQ4My00NTcxLWI3ZDEtNmRlYTYwM2NjYzdi
LzEvRm1fdGk3WkVteHpzYTJaZWt3Y1l1RmlpdHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVVwd5o0
ynTsXO3JjpQwOkm5QPU5mpNm7dwywDft0By04YMWQN+nVsjosbUizHI1LPn0m9ne
FWKQQqVpiIakMyG0Hu1P5XVu4LbO881jzi669KusYsyxttbXNA9gGWdPsA8b+jo2
zOhhrbOcmo5IclE0pR+2qx4FkmhyRPP62T42ZmU+ZK8EwkvdkygXTEwX/LhGtH3X
8bQqOKIK/hFhRjcskv7pEyGlelX5iEyu6XcKSV95LzwIVDUKbmO6cXx/f1v57xMg
HWyp2/d83Rt1D/eL98o+10q+DmeUmgqzYWvJCRKddQeQTRdkss3nNWfmFZLhWPSf
m5ALJwNxWnMNHA==
-----END CERTIFICATE-----
Generated at Thu May 2 20:23:24 2024 by rpki-client on console-ams.rpki-client.org